A dedicated DevSecOps Engineer based in Alexandria, Egypt, with a strong foundation in cloud infrastructure, CI/CD pipeline automation, and shift-left security. I specialize in building, securing, and optimizing highly available cloud-native environments and streamlining the software development lifecycle.
- 🛡️ Experienced in DevOps, Continuous Security (DevSecOps), Cloud Computing ☁️, and Infrastructure Automation 🔧.
- ⚙️ Specialize in zero-touch CI/CD pipelines, GitOps, Kubernetes container orchestration, and embedding security directly into deployment workflows.
- 💡 Passionate about transforming code into reliable, scalable deployments while ensuring systems are "secure by design".
- 💻 Worked with a modern tech stack including AWS, Terraform, Kubernetes, Docker, ArgoCD, GitHub Actions, and various security scanners (Trivy, OWASP ZAP, Semgrep).
DevSecOps Graduation Project | Route Academy | 2025 – 2026
- Architected a production-grade Kubernetes deployment for a multi-tier E-Commerce Microservices platform (Angular, .NET, MySQL).
- Built automated GitOps deployment pipelines using GitHub Actions and ArgoCD.
- Provisioned highly available AWS infrastructure (EKS, RDS) using modular Terraform and Ansible.
- Integrated continuous security scanning (Gitleaks, Semgrep, Trivy, OWASP ZAP) into pipelines and centralized findings in DefectDojo.
Cloud Services Management and Operations | National Telecommunication Institute (NTI) | 2025
- Gained hands-on expertise in managing cloud resources, Linux administration, and network security foundations.
Here's a glimpse of the technical stack I bring to the table:
- Cloud & Infrastructure: AWS (EKS, EC2, RDS), Linux (CentOS)
- Containerization & Orchestration: Docker, Kubernetes, Helm
- Infrastructure as Code (IaC): Terraform, Ansible
- CI/CD & GitOps: GitHub Actions, ArgoCD, GHCR
- DevSecOps & Security: DefectDojo, Trivy (Image/Config), OWASP ZAP (DAST), Semgrep (SAST), Gitleaks, tfsec, Kyverno, Istio
- Monitoring & Observability: Prometheus, Grafana, Elastic Stack (ECK)
- Version Control: Git, GitHub
- Scripting & Languages: Python, Bash, C, SQL (MySQL)
- Networking: CCNA
- 🔭 I’m currently working on automating secure GitOps workflows and provisioning scalable cloud infrastructure.
- 🌱 I’m currently learning advanced Kubernetes security policies and service mesh configurations.
- 👯 I’m looking to collaborate on Open Source DevSecOps projects and infrastructure automation.
- 💬 Ask me anything about DevSecOps, Shift-Left Security, CI/CD, and Cloud Automation.
- 📫 How to reach me: nmetwaly@yahoo.com
- ⚡ Fun fact: I love solving complex infrastructure puzzles and combining my engineering background with cloud security!